Cyber Threat Risk Manager

Job Role

To oversee the design and implementation of enterprise-wide cybersecurity architecture, with a strategic focus on securing applications, cloud environments like AWS/Azure, AI systems, and threat intelligence capabilities.

This role ensures that cybersecurity architecture aligns with business objectives, regulatory requirements, and the evolving threat landscape.

The position demands deep technical expertise, strategic foresight, and cross-functional leadership to embed security into the fabric of digital transformation initiatives.

This hands-on role collaborates with DevOps and engineering teams to integrate security into CI/CD pipelines, review cloud configurations, and ensure secure deployment of AI technologies.

Strategic Roles and Responsibilities

• Define and execute the enterprise cybersecurity architecture strategy aligned with business and regulatory requirements.
• Lead architectural reviews and security design for applications, cloud platforms, and emerging technologies including AI.
• Represent cybersecurity architecture in executive forums and cross-functional leadership meetings.

Functional Roles and Responsibilities

• Oversee secure architecture frameworks for cloud, on-premise, and hybrid environments.
• Oversee integration of threat intelligence into architectural decisions and security controls.
• Ensure secure design principles are embedded in application development and AI system deployments.
• Ensure architectural compliance with frameworks such as NIST, ISO 27001, and regulatory mandates.
• Collaborate with governance and risk teams to align architecture with enterprise risk posture.
• Partner with IT, DevOps, and business units to embed security into transformation initiatives.
• Provide technical guidance and mentorship to security analysts and specialists below

Cloud Security

Review cloud configurations and recommend improvements to reduce security risks.

Support cloud security assessments and remediation activities.

DevSecOps Support

Collaborate with DevOps teams to integrate security into CI/CD pipelines.

Assist in configuring automated security scans, container hardening, and secure deployment practices.

Promote secure coding and development hygiene across teams.

Application & AI/ML Security

Support secure design and deployment of applications and APIs.

Assist in identifying and mitigating risks in AI/ML models and data pipelines.

Help implement basic controls for AI model integrity, data privacy, and secure lifecycle management.

Documentation & Collaboration

Maintain documentation of cloud security configurations and DevSecOps practices.

Work closely with cloud engineers, developers, and data scientists to support secure implementations.

Participate in threat modeling and incident response activities related to cloud and AI systems.

Security Operations Governance

Threat modeling methodologies (e.g., STRIDE, DREAD).

Incident response processes and playbooks.

Security monitoring and alerting (SIEM, XDR).

Job Requirements

Education/Certification and Continued Education

• Deep expertise in cloud security, application security, AI security, and threat intelligence.
• Strong understanding of architectural frameworks and secure design principles.
• Certifications preferred: CISSP, CCSP, SABSA, TOGAF, AWS/Azure Security.
• Excellent communication, leadership, and stakeholder management skills.

Years of Experience

• 8+ years of experience in cybersecurity architecture and engineering.

Knowledge and Skills

• Deep knowledge of cybersecurity architecture principles across cloud, on-premise, and hybrid environments.
• Strong understanding of secure application design, DevSecOps practices, and AI system security.
• Familiarity with ERP, enterprise platforms, and emerging technologies from a security perspective.
• Capability to align cybersecurity architecture with business goals and regulatory requirements.
• Strong analytical and problem-solving skills to assess risks and design resilient security solutions.
• Excellent written and verbal communication skills for presenting architectural decisions, risk assessments, and strategic plans.
• Experience in preparing executive-level reports and dashboards on architectural posture and threat landscape.